Unscored severity · published Jan 9, 2001
CVE-2000-1158
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords
–
CVSS
1.3%
EPSS
No
On KEV
Description
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Sniffer Agent · Network Associates
3.0.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-1158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-1158
Exploit
http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html
More from Sniffer Agent
–
CVE-2000-1157
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name
–
CVE-2000-1159
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands
–
CVE-2000-1160
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests